Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: +RtEjzUUtNGA2pRMQmOhz4Pz7hhJ7cs2cAm0c6tmt80=
Subject key identifier: 29:96:3C:22:78:BE:B0:52:F5:6F:93:3B:43:E1:86:26:82:C5:A1:FA
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 0194BCAA342118774797ABC41FE631D887E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: V5gnWWACdmwWGu4bJiiXQJ3DUROMNQ7OLeuYoKTqzD4=)
2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:21:18:77:47:97:ab:c4:1f:e6:31:d8:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=29963c2278beb052f56f933b43e1862682c5a1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:f2:d9:18:18:e8:ac:7f:a3:d2:21:7f:f7:
63:12:11:ae:e5:c3:0b:00:8b:86:bf:f5:ae:03:e5:
ec:f8:9e:57:16:f1:2f:45:8e:29:2d:ba:61:24:6a:
db:1a:50:5e:b2:8b:17:db:0e:b6:1a:69:92:e7:4a:
9e:19:34:23:b8:c9:67:b3:13:d8:fa:24:f1:97:63:
7f:7e:c0:f1:53:d0:38:21:84:85:a4:a8:c9:60:30:
04:c9:bc:9e:8b:0b:24:03:27:87:38:56:3b:86:24:
1c:66:ba:3a:af:e7:62:e4:4f:4f:1f:b7:e2:51:f4:
98:f0:7e:ec:d1:c7:51:32:8e:36:d3:72:ff:7e:88:
8e:e5:92:e6:cf:5b:de:80:41:77:d2:8c:d5:ea:9b:
6b:01:dc:28:86:13:40:32:f3:ed:36:89:3e:03:ed:
80:a8:0f:f0:f8:05:a5:81:0a:f5:81:b2:8a:17:0b:
e5:ee:c8:98:42:43:eb:8b:bb:77:71:04:fe:df:90:
2f:7b:fd:d9:06:c6:50:0b:e0:c7:30:ee:45:a3:50:
d0:db:92:71:0e:fb:dd:3e:70:fe:d2:b8:dc:71:d2:
82:43:68:9e:b9:40:4d:8e:1f:66:e9:45:1f:2c:7b:
14:26:df:6a:ee:8d:74:55:b7:f4:ee:a1:46:64:94:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:3C:22:78:BE:B0:52:F5:6F:93:3B:43:E1:86:26:82:C5:A1:FA
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a1:34:13:2c:87:05:48:3b:56:3d:66:c7:2b:5a:ef:29:5c:
41:41:0e:df:54:e2:d9:49:d1:b7:f5:2d:80:18:73:02:3f:f9:
ab:0d:1f:f0:da:3d:97:b7:06:8e:e6:64:0e:06:38:5d:39:d4:
90:3e:9d:c1:87:55:7e:90:03:d8:c5:0e:44:7b:5d:e2:62:ae:
ac:f5:01:ee:a4:32:7b:84:25:e5:55:31:b5:71:fb:60:16:da:
d1:29:bc:a8:c7:dd:8a:68:eb:97:fd:e8:3c:2b:0e:83:57:87:
c4:ea:01:ea:ca:86:51:f5:6a:bf:fe:a5:a8:c2:56:5c:d1:09:
44:4e:b8:9c:f1:9f:2f:9f:3d:b4:70:1d:e1:f8:af:01:ca:cf:
08:73:a1:96:3b:94:d6:f1:5b:0a:73:9c:e9:39:41:9f:11:db:
11:76:b9:52:f5:cc:4a:4e:8a:e9:da:d2:7d:24:71:5e:3c:55:
e0:ae:de:d5:ce:f4:53:54:bd:9a:fd:f3:94:40:d2:60:8d:b2:
ea:a3:77:e9:0c:50:f7:2d:84:e3:a7:c3:cd:84:7b:0f:c8:3e:
a4:34:12:b7:dc:e7:9e:45:5f:06:23:ea:2e:81:0d:cc:e5:52:
09:c1:89:a2:4a:24:b4:1c:88:f4:5d:dc:47:ac:44:dd:ab:7d:
b9:6f:1b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjQhGHdHl6vEH+Yx2IfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTA3OWQ3MzQ5ODkxZDJiNDAyNDg5NWZhNjdlNDFjMThm
NTZmZDQwHhcNMjUwMTMxMTQwMDU4WhcNMjUwMjAxMTQwMDU4WjAzMTEwLwYDVQQD
EygyOTk2M2MyMjc4YmViMDUyZjU2ZjkzM2I0M2UxODYyNjgyYzVhMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua/y2RgY6Kx/o9Ihf/djEhGu5cML
AIuGv/WuA+Xs+J5XFvEvRY4pLbphJGrbGlBesosX2w62GmmS50qeGTQjuMlnsxPY
+iTxl2N/fsDxU9A4IYSFpKjJYDAEybyeiwskAyeHOFY7hiQcZro6r+di5E9PH7fi
UfSY8H7s0cdRMo4203L/foiO5ZLmz1vegEF30ozV6ptrAdwohhNAMvPtNok+A+2A
qA/w+AWlgQr1gbKKFwvl7siYQkPri7t3cQT+35Ave/3ZBsZQC+DHMO5Fo1DQ25Jx
DvvdPnD+0rjccdKCQ2ieuUBNjh9m6UUfLHsUJt9q7o10Vbf07qFGZJSsrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmWPCJ4vrBS9W+TO0PhhiaCxaH6MB8GA1UdIwQY
MBaAFJPgedc0mJHStAJIlfpn5BwY9W/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZTM2YjYtZDVhZi00MTBhLTlmYjkt
OGE5MmRmNzdhMDdmLzEvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZTM2YjYtZDVhZi00MTBhLTlmYjktOGE5MmRmNzdhMDdm
LzEvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqE0EyyH
BUg7Vj1mxyta7ylcQUEO31Ti2UnRt/UtgBhzAj/5qw0f8No9l7cGjuZkDgY4XTnU
kD6dwYdVfpAD2MUORHtd4mKurPUB7qQye4Ql5VUxtXH7YBba0Sm8qMfdimjrl/3o
PCsOg1eHxOoB6sqGUfVqv/6lqMJWXNEJRE64nPGfL589tHAd4fivAcrPCHOhljuU
1vFbCnOc6TlBnxHbEXa5UvXMSk6K6drSfSRxXjxV4K7e1c70U1S9mv3zlEDSYI2y
6qN36QxQ9y2E46fDzYR7D8g+pDQSt9znnkVfBiPqLoENzOVSCcGJokoktByI9F3c
R6xE3at9uW8bmw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:35 2025 by rpki-client